CVE-2018-14035

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VMmemcpyvv in H5VM.c...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Adobe Acrobat Pro DC ImageConversion EMF JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Adobe Acrobat Pro DC ImageConversion XPS JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

Heap overflow

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

Heap overflow

The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...

CVE-2018-14016

The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...

CVE-2018-14016

The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...

CVE-2018-14017

The CVE-2018-14017 entry affects radare2 (version 2.7.0) specifically the r_bin_java_annotation_new function in shlr/java/class.c. The vulnerability arises from missing input validation in r_bin_java_line_number_table_attr_new, enabling remote attackers to craft a .class file that triggers a heap...

CVE-2018-14016

The CVE-2018-14016 issue affects radare2 2.7.0, specifically the r_bin_mdmp_init_directory_entry function in mdmp.c. A crafted Mini Crash Dump file can trigger a heap-based buffer over-read, leading to an application crash (DoS). All sources consistently describe this vulnerability as a remote-tr...

Computerinsel Photoline ANI Parsing Code Execution Vulnerability

Summary A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this...

CVE-2018-13868

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Ofillolddecode in H5Ofill.c...

CVE-2018-13872

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5Gentdecode in H5Gent.c...

Heap overflow

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5Gentdecode in H5Gent.c...

CVE-2018-13871

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FLblkmalloc in H5FL.c...

CVE-2018-13868

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Ofillolddecode in H5Ofill.c...

CVE-2018-13870

CVE-2018-13870 affects HDF5 1.8.20, causing a heap-based buffer over-read in H5O_link_decode (H5Olink.c). The vulnerability is cited across multiple advisories (e.g., SUSE-SU-2022:1933-1, SUSE-SU-2022:1911-1, SUSE-SU-2022:1903-1) and is acknowledged in Nessus OSVs as part of unpatched/have fixes....

CVE-2018-13868

CVE-2018-13868 affects the HDF5 1.8.20 library, with a heap-based buffer over-read in the function H5O_fill_old_decode (H5Ofill.c). The detail is consistently described across multiple connected sources, identifying the vulnerable component as H5O_fill_old_decode and the affected library/version ...